Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/ZGtmi-nE3V1ZJfSc2s5cgIQiFXI.roa
File:                     ZGtmi-nE3V1ZJfSc2s5cgIQiFXI.roa (raw, json)
Hash identifier:          Y/49iE0JwGHsBxYuwJEVtJTHPzx2dinHdB9l7EP8MGc=
Subject key identifier:   64:6B:66:8B:E9:C4:DD:5D:59:25:F4:9C:DA:CE:5C:80:84:22:15:72
Certificate issuer:       /CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
Certificate serial:       01856E01E697C0D1574D173D0C3032F2E7E5
Authority key identifier: F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/ZGtmi-nE3V1ZJfSc2s5cgIQiFXI.roa
Signing time:             Sun 01 Jan 2023 15:44:56 +0000
ROA not before:           Sun 01 Jan 2023 15:44:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207404
IP address blocks:        194.127.208.0/22 maxlen: 24
                          2001:678:c48::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:01:e6:97:c0:d1:57:4d:17:3d:0c:30:32:f2:e7:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
        Validity
            Not Before: Jan  1 15:44:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=646b668be9c4dd5d5925f49cdace5c8084221572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ab:f8:1a:17:d8:34:25:6d:41:4b:e7:f8:36:
                    6c:4d:5f:83:ff:04:96:1c:7f:16:dd:b9:be:6a:3b:
                    c4:e8:0a:d7:cb:80:f4:94:04:1c:3f:d6:74:c5:7a:
                    29:d3:67:7e:a7:f4:cd:52:35:1a:9f:46:ad:21:c1:
                    14:8c:e1:89:bc:17:ed:e4:11:67:77:bb:d2:9b:cb:
                    08:dd:a7:4e:63:9e:a1:a5:55:37:a0:52:72:5f:9a:
                    42:80:5a:3c:f5:18:e2:cf:79:36:82:ce:fc:5c:c2:
                    dc:84:da:25:2e:e8:41:12:db:1f:be:cb:3a:a5:88:
                    64:71:7a:fa:92:84:e4:c4:25:c4:26:5a:43:24:8b:
                    04:85:23:28:68:39:ad:9b:da:41:54:a3:51:5b:9a:
                    d1:35:cf:26:e5:24:8b:a8:2f:db:4c:07:81:c8:6b:
                    3f:20:c8:7f:05:ad:f6:8b:21:eb:4c:e2:66:35:bd:
                    08:f3:9d:83:b2:ab:25:27:47:eb:20:fd:d2:0d:3d:
                    ff:fc:cb:ee:54:4b:cb:39:c3:ad:67:0d:dd:c5:23:
                    1f:c2:d5:41:4f:2b:7c:14:cb:1e:9f:ef:7d:ff:b1:
                    29:fc:f4:28:3c:de:c1:46:79:6e:70:0b:9d:ce:b9:
                    a3:81:47:34:26:2f:21:c5:81:e9:93:d8:74:02:71:
                    fa:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:6B:66:8B:E9:C4:DD:5D:59:25:F4:9C:DA:CE:5C:80:84:22:15:72
            X509v3 Authority Key Identifier:
                keyid:F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/ZGtmi-nE3V1ZJfSc2s5cgIQiFXI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.127.208.0/22
                IPv6:
                  2001:678:c48::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:39:4d:0c:18:ca:88:df:6b:94:2c:ff:f3:02:83:33:69:20:
         10:4d:cd:af:6a:40:1f:1f:d9:f1:e9:9a:8d:06:53:ce:97:b2:
         46:02:80:2b:ce:26:72:e6:48:1d:e9:57:32:3f:90:c0:f0:31:
         4c:54:2b:3b:60:2d:20:bb:28:18:57:bf:b3:bd:3e:cb:4c:ce:
         06:93:aa:7f:9a:5d:8c:a0:5e:04:f7:9b:84:b6:63:35:ea:23:
         34:8d:0a:a0:2a:d2:39:89:d0:a7:7a:88:0f:15:3d:65:73:e6:
         dc:b5:be:05:59:6f:6d:ea:3f:bc:7e:9e:24:cd:67:59:d2:e5:
         be:79:27:d9:93:58:19:c8:a4:05:11:bd:6c:5c:a2:27:93:61:
         ad:7b:3e:b3:38:75:25:3e:4f:2d:8d:99:0e:47:13:1e:d3:9a:
         0a:19:3c:8b:29:3e:65:5b:9c:ab:9c:6e:66:33:68:36:30:9c:
         b1:3b:ae:ad:1e:6b:e4:69:86:46:7f:8c:6f:3b:19:58:04:f0:
         d4:1c:97:c2:81:ab:c5:6d:44:36:12:e6:4e:6e:4e:eb:3a:77:
         f0:01:22:71:dd:23:1b:b5:33:b8:86:21:ce:4a:4b:08:a1:63:
         c3:f6:da:64:ee:0b:1b:34:be:b7:29:1c:05:7f:9d:af:e4:28:
         a6:89:58:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----